CISA Warns of Actively Exploited Microsoft Outlook Zero-Day Vulnerability

The Cybersecurity and Infrastructure Security Agency has added CVE-2026-124194, an actively exploited Microsoft Outlook spoofing vulnerability, to its Known Exploited Vulnerabilities catalog. Added on November 10, 2026, the entry establishes a November 24 remediation deadline. The warning follows disclosures about Outlook authentication theft involving malicious message files and unsafe external connections. Microsoft Outlook Zero-Day Vulnerability […]

This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform